Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-16011

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the CLI utility. The attacker must be authenticated to access the CLI utility. A successful exploit could allow the attacker to execute commands with root privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 28.8%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 7.2
Products affected by CVE-2019-16011
  • Cisco » Ios Xe » Version: 16.10.2
    cpe:2.3:a:cisco:ios_xe:16.10.2
  • Cisco » Ios Xe » Version: 16.11
    cpe:2.3:a:cisco:ios_xe:16.11
  • cpe:2.3:h:cisco:1100_integrated_services_router:-
  • cpe:2.3:h:cisco:4221_integrated_services_router:-
  • cpe:2.3:h:cisco:4331_integrated_services_router:-
  • cpe:2.3:h:cisco:4431_integrated_services_router:-
  • cpe:2.3:h:cisco:4461_integrated_services_router:-
  • Cisco » Asr 1001-Hx » Version: N/A
    cpe:2.3:h:cisco:asr_1001-hx:-
  • Cisco » Asr 1001-X » Version: N/A
    cpe:2.3:h:cisco:asr_1001-x:-
  • Cisco » Asr 1002-Hx » Version: N/A
    cpe:2.3:h:cisco:asr_1002-hx:-
  • Cisco » Asr 1002-X » Version: N/A
    cpe:2.3:h:cisco:asr_1002-x:-
  • Cisco » Asr 1004 » Version: N/A
    cpe:2.3:h:cisco:asr_1004:-
  • Cisco » Asr 1006-X » Version: N/A
    cpe:2.3:h:cisco:asr_1006-x:-
  • Cisco » Asr 1006 » Version: N/A
    cpe:2.3:h:cisco:asr_1006:-
  • Cisco » Asr 1009-X » Version: N/A
    cpe:2.3:h:cisco:asr_1009-x:-
  • Cisco » Asr 1013 » Version: N/A
    cpe:2.3:h:cisco:asr_1013:-
  • Cisco » Csr1000v » Version: N/A
    cpe:2.3:h:cisco:csr1000v:-
  • Cisco » Ios Xe » Version: 16.10
    cpe:2.3:o:cisco:ios_xe:16.10
  • Cisco » Ios Xe » Version: 16.12
    cpe:2.3:o:cisco:ios_xe:16.12
  • Cisco » Ios Xe » Version: 16.12.0
    cpe:2.3:o:cisco:ios_xe:16.12.0
  • Cisco » Ios Xe » Version: 16.12.1
    cpe:2.3:o:cisco:ios_xe:16.12.1
  • Cisco » Ios Xe » Version: 16.12.10
    cpe:2.3:o:cisco:ios_xe:16.12.10
  • Cisco » Ios Xe » Version: 16.12.10a
    cpe:2.3:o:cisco:ios_xe:16.12.10a
  • Cisco » Ios Xe » Version: 16.12.11
    cpe:2.3:o:cisco:ios_xe:16.12.11
  • Cisco » Ios Xe » Version: 16.12.1a
    cpe:2.3:o:cisco:ios_xe:16.12.1a
  • Cisco » Ios Xe » Version: 16.12.1b
    cpe:2.3:o:cisco:ios_xe:16.12.1b
  • Cisco » Ios Xe » Version: 16.12.1c
    cpe:2.3:o:cisco:ios_xe:16.12.1c
  • Cisco » Ios Xe » Version: 16.12.1d
    cpe:2.3:o:cisco:ios_xe:16.12.1d
  • Cisco » Ios Xe » Version: 16.12.1s
    cpe:2.3:o:cisco:ios_xe:16.12.1s
  • Cisco » Ios Xe » Version: 16.12.1t
    cpe:2.3:o:cisco:ios_xe:16.12.1t
  • Cisco » Ios Xe » Version: 16.12.1w
    cpe:2.3:o:cisco:ios_xe:16.12.1w
  • Cisco » Ios Xe » Version: 16.12.1x
    cpe:2.3:o:cisco:ios_xe:16.12.1x
  • Cisco » Ios Xe » Version: 16.12.1y
    cpe:2.3:o:cisco:ios_xe:16.12.1y
  • Cisco » Ios Xe » Version: 16.12.1z
    cpe:2.3:o:cisco:ios_xe:16.12.1z
  • Cisco » Ios Xe » Version: 16.12.1z1
    cpe:2.3:o:cisco:ios_xe:16.12.1z1
  • Cisco » Ios Xe » Version: 16.12.1z2
    cpe:2.3:o:cisco:ios_xe:16.12.1z2
  • Cisco » Ios Xe » Version: 16.12.1za
    cpe:2.3:o:cisco:ios_xe:16.12.1za
  • Cisco » Ios Xe » Version: 16.12.2
    cpe:2.3:o:cisco:ios_xe:16.12.2
  • Cisco » Ios Xe » Version: 16.12.2a
    cpe:2.3:o:cisco:ios_xe:16.12.2a
  • Cisco » Ios Xe » Version: 16.12.2r
    cpe:2.3:o:cisco:ios_xe:16.12.2r
  • Cisco » Ios Xe » Version: 16.12.2s
    cpe:2.3:o:cisco:ios_xe:16.12.2s
  • Cisco » Ios Xe » Version: 16.12.2t
    cpe:2.3:o:cisco:ios_xe:16.12.2t
  • Cisco » Ios Xe » Version: 16.12.3
    cpe:2.3:o:cisco:ios_xe:16.12.3
  • Cisco » Ios Xe » Version: 16.12.3a
    cpe:2.3:o:cisco:ios_xe:16.12.3a
  • Cisco » Ios Xe » Version: 16.12.3s
    cpe:2.3:o:cisco:ios_xe:16.12.3s
  • Cisco » Ios Xe » Version: 16.12.4
    cpe:2.3:o:cisco:ios_xe:16.12.4
  • Cisco » Ios Xe » Version: 16.12.4a
    cpe:2.3:o:cisco:ios_xe:16.12.4a
  • Cisco » Ios Xe » Version: 16.12.5
    cpe:2.3:o:cisco:ios_xe:16.12.5
  • Cisco » Ios Xe » Version: 16.12.5a
    cpe:2.3:o:cisco:ios_xe:16.12.5a
  • Cisco » Ios Xe » Version: 16.12.5b
    cpe:2.3:o:cisco:ios_xe:16.12.5b
  • Cisco » Ios Xe » Version: 16.12.6
    cpe:2.3:o:cisco:ios_xe:16.12.6
  • Cisco » Ios Xe » Version: 16.12.6a
    cpe:2.3:o:cisco:ios_xe:16.12.6a
  • Cisco » Ios Xe » Version: 16.12.7
    cpe:2.3:o:cisco:ios_xe:16.12.7
  • Cisco » Ios Xe » Version: 16.12.8
    cpe:2.3:o:cisco:ios_xe:16.12.8
  • Cisco » Ios Xe » Version: 16.12.9
    cpe:2.3:o:cisco:ios_xe:16.12.9
  • Cisco » Ios Xe » Version: 16.12b
    cpe:2.3:o:cisco:ios_xe:16.12b
  • Cisco » Ios Xe » Version: 16.9
    cpe:2.3:o:cisco:ios_xe:16.9
  • Cisco » Ios Xe » Version: 17.1
    cpe:2.3:o:cisco:ios_xe:17.1
  • Cisco » Ios Xe » Version: 17.1.0
    cpe:2.3:o:cisco:ios_xe:17.1.0
  • Cisco » Ios Xe » Version: 17.1.1
    cpe:2.3:o:cisco:ios_xe:17.1.1
  • Cisco » Ios Xe » Version: 17.1.1a
    cpe:2.3:o:cisco:ios_xe:17.1.1a
  • Cisco » Ios Xe » Version: 17.1.1s
    cpe:2.3:o:cisco:ios_xe:17.1.1s
  • Cisco » Ios Xe » Version: 17.1.1t
    cpe:2.3:o:cisco:ios_xe:17.1.1t
  • Cisco » Ios Xe » Version: 17.1.2
    cpe:2.3:o:cisco:ios_xe:17.1.2
  • Cisco » Ios Xe » Version: 17.1.3
    cpe:2.3:o:cisco:ios_xe:17.1.3
  • Cisco » Ios Xe » Version: 17.2
    cpe:2.3:o:cisco:ios_xe:17.2
  • Cisco » Ios Xe » Version: 17.2.0
    cpe:2.3:o:cisco:ios_xe:17.2.0
  • Cisco » Ios Xe » Version: 17.2.1
    cpe:2.3:o:cisco:ios_xe:17.2.1
  • Cisco » Ios Xe » Version: 17.2.1a
    cpe:2.3:o:cisco:ios_xe:17.2.1a
  • Cisco » Ios Xe » Version: 17.3
    cpe:2.3:o:cisco:ios_xe:17.3


Products
Pricing
Contact Us

Shodan ® - All rights reserved